599b6716a911972afa37d0e34ccea3b6

General

Target
599b6716a911972afa37d0e34ccea3b6
Size 1.1MB
Sample240113-2p2rmagdf3
SHA256 f85d94f00d20a450d004a0c63b98126bf17ef25a68525f2653938900bb6d1a36
MD5 599b6716a911972afa37d0e34ccea3b6
SHA1 2f753ac06d8ad978cee6fae298a1d1f5854e0c9f
SHA512 a812bd84cbb58baff3c0b813a06b815afe014e50d1c24d808a903199c526732029556b6afbe8556b075dd6b91513d20dd88d82c17aa95ce7e119f4e9c19554d8
SSDEEP 24576:4CQpHD5JH6m0hl9lUtwnzzSKih3y/F77DnDAlcta0aYG:MpHHanetMih3y/F77v0c80aYG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
599b6716a911972afa37d0e34ccea3b6

File Explorer

599b6716a911972afa37d0e34ccea3b6

.exe 1.1MB

599b6716a911972afa37d0e34ccea3b6

IMPHASH dc072b97ab69d9cf474e33b457c157dd
SHA256 f85d94f00d20a450d004a0c63b98126bf17ef25a68525f2653938900bb6d1a36
MD5 599b6716a911972afa37d0e34ccea3b6
SHA1 2f753ac06d8ad978cee6fae298a1d1f5854e0c9f
SHA512 a812bd84cbb58baff3c0b813a06b815afe014e50d1c24d808a903199c526732029556b6afbe8556b075dd6b91513d20dd88d82c17aa95ce7e119f4e9c19554d8
SSDEEP 24576:4CQpHD5JH6m0hl9lUtwnzzSKih3y/F77DnDAlcta0aYG:MpHHanetMih3y/F77v0c80aYG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

269778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateThread GlobalUnlock GlobalLock GlobalAlloc GetTickCount WideCharToMultiByte IsBadReadPtr GlobalAddAtomA GlobalAddAtomW GetModuleHandleA GlobalFree GlobalGetAtomNameA GlobalDeleteAtom GlobalGetAtomNameW FreeConsole GetEnvironmentVariableA VirtualProtect VirtualAlloc GetProcAddress GetLastError LoadLibraryA SetLastError SetThreadPriority GetCurrentThread CreateProcessA GetCommandLineA GetStartupInfoA SetEnvironmentVariableA ReleaseMutex WaitForSingleObject CreateMutexA OpenMutexA GetCurrentThreadId CreateFileA FindClose FindFirstFileA FindFirstFileW VirtualQueryEx GetExitCodeProcess ReadProcessMemory UnmapViewOfFile ContinueDebugEvent SetThreadContext GetThreadContext WaitForDebugEvent SuspendThread DebugActiveProcess ResumeThread CreateProcessW GetCommandLineW GetStartupInfoW CloseHandle DuplicateHandle GetCurrentProcess CreateFileMappingA VirtualProtectEx WriteProcessMemory ExitProcess FlushFileBuffers WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA HeapSize HeapReAlloc QueryPerformanceCounter VirtualFree HeapCreate HeapDestroy GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA RtlUnwind DeleteCriticalSection GetStdHandle WriteFile TlsFree TlsSetValue TlsAlloc TlsGetValue Sleep EnterCriticalSection LeaveCriticalSection GetVersionExA InitializeCriticalSection GetCurrentProcessId GetModuleFileNameW GetShortPathNameW GetModuleFileNameA MapViewOfFile GetShortPathNameA GetSystemTimeAsFileTime HeapFree HeapAlloc GetProcessHeap RaiseException TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage

user32

GetDesktopWindow MoveWindow SetPropA EnumThreadWindows GetPropA GetMessageA GetSystemMetrics SetTimer GetAsyncKeyState KillTimer BeginPaint EndPaint SetWindowTextA GetDlgItem CreateDialogIndirectParamA ShowWindow UpdateWindow LoadStringA LoadStringW FindWindowA WaitForInputIdle MessageBoxA InSendMessage UnpackDDElParam FreeDDElParam DefWindowProcA LoadCursorA RegisterClassW CreateWindowExW RegisterClassA CreateWindowExA GetWindowThreadProcessId SendMessageW SendMessageA PeekMessageA TranslateMessage DispatchMessageA EnumWindows IsWindowUnicode PackDDElParam PostMessageW PostMessageA IsWindow DestroyWindow

gdi32

CreateDCA CreateDIBitmap CreateCompatibleDC SelectObject SelectPalette RealizePalette BitBlt DeleteDC DeleteObject CreatePalette

Name

.text

Size

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text1

Size

264KB

Virtual Size

320KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

52KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

44KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

252KB

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

532KB

Virtual Size

532KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

599b6716a911972afa37d0e34ccea3b6

kernel32

user32

gdi32

generic